CVE-2023-44116

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published: Oct 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-441177.5Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect ser CVE-2023-441189.1Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and conf CVE-2023-441197.5Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability.CVE-2023-44129.8A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCf CVE-2023-441207.8A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local CVE-2023-441216.3The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManag CVE-2023-441227.8The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "CVE-2023-441237.8The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of a CVE-2023-441243.3The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the CVE-2023-441257.8The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write CVE-2023-441265.5The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts t CVE-2023-441275.5he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensit